Privacy Policy
Last updated: September 30, 2026
Short version: browsing RipIndex needs no account and stays anonymous. The board, the Rip Sim, the report and wallet lookups all work without telling us who you are, and we don’t try to find out. If you choose to create an account — which you only need for saved, personal features such as card watches — we store your email address and any wallet you link to it, because we cannot sign you in or send you what you asked for without them. When wallet features are used we store public blockchain addresses and their public on-chain activity.
What we collect
- Cookieless, aggregate analytics. We use Cloudflare Web Analytics to understand overall traffic (page views, referrers, country-level region, device type). It is privacy-first: it sets no cookies, does not fingerprint you, and does not track you across other sites.
- Anonymous interaction counts. When you tap an “Open” button, we record only which site and which pack was opened. We count a few other interactions the same way — which packs get simulated in Rip Sim, which pages hold attention (as a coarse time bucket), and which navigation links get used. Every one of these is a bare counter: no personal identifiers — no name, no IP stored against it, no cookie, nothing tied to you.
- Settings and Rip Sim progress on your device. Your theme (night/day), board view and site preference, and your Rip Sim bank and session history are stored in your browser’s local storage. They stay on your device; Rip Sim sends only the anonymous counts described above.
- A visit counter on your device. Your browser keeps a small note of when you last visited RipIndex and roughly how many visits you've made. That note stays in your browser's local storage. When a visit starts, we receive only a coarse bucket — for example “back after 1–7 days, 3rd–4th visit” — that many visitors share. It carries no identifier and isn't tied to you. Clearing your browser's storage resets it.
- Sign-in data on your device — only if you sign in. When you sign in, your browser stores your sign-in session (a login token from Supabase, our sign-in service) and which kind of wallet you used, so you stay signed in. The token is sent only to our sign-in service and our own servers, to keep you signed in and prove it’s you when you use account features. A few short-lived markers in your browser’s session storage remember a sign-in or card watch you started; they clear when you close the tab. Sign-in runs through Privy’s sign-in window, and Privy’s code also keeps its own sign-in data in your browser and may set its own cookies (see Privy’s privacy policy).
- Account details — only if you create an account. Accounts are optional and exist for saved, personal features such as card watches. If you make one we store: your email address (to sign you in, to recover access, and to send only the notifications you asked for), any wallet address you link, and the settings you save — for example which cards you are watching and how you want to be alerted. Signing in with a wallet asks you to sign a message to prove you control that address; a signature is not a transaction, it moves no funds, and we never see or ask for your private key or seed phrase.
Wallet lookups, watches & leaderboards
Some features work on public blockchain data, and for those we do store wallet addresses:
- Rip Receipts. When any visitor looks up a wallet, we read that address’s public on-chain history (pulls, buybacks, holdings) and cache it — the address and its public activity — so results stay fast and complete on later lookups. We do not record who ran the lookup, and we never link an address to a person, browser, or IP.
- Wallet Watch. If you
/watcha wallet in an alert bot, we store that address together with the chat or channel that asked, solely to deliver the pings, digests and monthly recaps you asked for./unwatchremoves it. - Leaderboards. Weekly boards display truncated wallet addresses (and, for Monster, the usernames that site itself publishes) taken from the sites’ public pull feeds and public blockchains.
Wallet addresses are public, pseudonymous blockchain identifiers — but if you want a specific address’s cached data removed from our systems, email support@rip-index.com, ask in the community Discord, or DM @Rip_Index and we’ll remove it.
What we do not collect
We do not collect or store your name, postal address, phone number, date of birth, or any government identifier. We never see, ask for, or store private keys or seed phrases, and we never ask you to approve a transaction that moves funds — signing in with a wallet signs a plain message, nothing more.
We never store passwords: signing in uses either a wallet signature or a one-time code sent to your email, so there is no password to leak. If paid features are added we will not store card or payment details either — those go directly to a payment processor and never touch our servers.
If you never create an account, none of the account data above exists for you at all, and browsing stays anonymous.
Cookies
RipIndex does not use cookies for tracking or advertising. (That’s why you won’t see a cookie-consent banner.) Apart from any cookie Privy’s sign-in window may set when you sign in, the only browser storage we use is what’s described above: your settings and Rip Sim progress, the visit counter, and — if you sign in — your sign-in data.
Third-party services
To run the site we rely on a few providers, each with its own privacy policy:
- Cloudflare — DNS and privacy-first analytics.
- Vercel — website hosting.
- Google Fonts — web fonts.
- Supabase — the database and sign-in service behind accounts, and also stores the weekly Rip Report email list if you sign up for that on /alerts. Involved only if you create an account or sign up for the email digest — not otherwise.
- Resend — sends account emails such as sign-in codes and address confirmations. Only involved if you create an account.
- Privy — runs our sign-in window, whether you sign in with an email, a social account or your own wallet, and can create a wallet for you if you don’t have one. Only involved when you sign in or out — just browsing RipIndex never loads their code.
- Destination platforms (e.g. Collector Crypt, Courtyard) — when you follow an outbound link, you leave RipIndex and their privacy practices apply, not ours.
Alert bots (Discord & Telegram)
If you add a RipIndex alert bot to your Discord server or Telegram group, we store the server/channel or chat identifiers and the alert settings you configure (sites, signal types, thresholds), plus the ID of the admin who set them — solely to deliver the alerts you asked for. The bots do not read, process, or store message content, member lists, or anything else from your server. Remove the bot at any time; to have its configuration records deleted, email support@rip-index.com or message @Rip_Index.
Browser extension
RipIndex offers an optional browser extension (and an equivalent Tampermonkey userscript) that shows our published odds, measured returns and pool information beside packs on the partner sites we track (Collector Crypt, Courtyard, Jupiter Gacha, Monster, GachaPull, Phygitals and Beezie).
What it reads. On those sites only, the extension reads the page you are already viewing to work out which pack or machine is on screen, so it can show the matching RipIndex record. It does not read other websites, your browsing history, form fields, passwords, wallet keys or cookies belonging to those sites.
What it sends to us. It requests the matching record from rip-index.com by pack or machine identifier. The extension currently has no membership and sends no account token. (The code contains a dormant pairing feature that is switched off; if a membership is offered, this section will be updated before it is enabled.) It sends a minimal usage beacon (which site and pack was viewed, whether a link was clicked) that we use to measure the feature; these beacons carry no account identifiers and never page content.
What it stores on your device. Your display preferences (panel position, collapsed state, layout, and whether pool chips are shown) in the browser's extension storage. Nothing else.
What it does not do. It does not modify or place orders on partner sites, does not inject advertising, does not track you across the web, and does not sell or share data with the partner sites or anyone else. Referral links it shows are the same ones on rip-index.com.
Removal. Uninstalling the extension deletes its local storage.
Weekly Rip Report email digest
If you enter your email on /alerts to get the weekly Rip Report, we store that address for that single purpose — delivering the report — and never sell or share it. Remove it at any time from the same page, or by emailing support@rip-index.com. This is separate from an account: no account is created or required.
Data sharing
We do not sell or rent personal information, and we never have. We do not share it with advertisers, data brokers, or the platforms we cover.
The only parties that touch account data are the service providers listed above, strictly so they can do their job — the database that stores your account, and the service that delivers an email you asked for. They act on our instructions and are not permitted to use your data for their own purposes.
Children
RipIndex is intended for adults and is not directed to children.
Your choices and your rights
You can clear your browser’s local storage at any time to reset your settings (this also signs you out and resets Rip Sim), and you can use your browser’s privacy controls as you wish. You can also ask us to remove a specific wallet address’s cached public data at any time (see “Wallet lookups, watches & leaderboards” above).
If you have an account, you can ask us to:
- Show you what we hold — a copy of your account data.
- Correct it — change your email or unlink a wallet.
- Delete it — close the account and remove your email, linked wallets and saved watches. Deleting the account does not delete public blockchain data, because that is not ours to erase; it lives on the chain regardless of us.
- Stop the emails — turn off notifications while keeping the account, or leave entirely.
Email support@rip-index.com and we will action it. You never need an account to use the public parts of the site, and we will not ask you to make one to read anything.
Changes
We may update this policy occasionally; the “last updated” date above reflects the latest version.
Contact
Privacy questions, data requests, or anything on this page: email support@rip-index.com — that reaches a person, and it is the fastest route for anything involving your account or your data. You can also find us in the community Discord or on X at @Rip_Index.
About & Disclaimers · Methodology · Terms of Service · Data & Commercial Use